CVE Catalog

CVE-2026-65663

HighCVSS 8.8
Published: Updated: Translated: NVD NIST

Exploitation Probability (EPSS)

Elevated risk
1.15%

64th percentile - higher than 64% of all known CVEs

Summary

Deserialization of untrusted data in Microsoft Office SharePoint allows an authorized attacker to execute code over a network.

Risk Assessment

An authorized attacker can remotely execute arbitrary code on the SharePoint server, potentially leading to server takeover and data access.

Recommendation

Apply security patches provided by Microsoft for SharePoint and restrict trust in input data.

Original NVD description (English source)

Deserialization of untrusted data in Microsoft Office SharePoint allows an authorized attacker to execute code over a network.

Vulnerability data from NVD (NIST) · CISA KEV · EPSS